Incremental particle swarm optimisation for intrusion detection. Issue 3 (1st September 2013)

• Record Type: Journal Article
• Authors: Tsai, Chun‐Wei
• Is Part Of: IET networks. Volume 2:Issue 3(2013)
• Page Start: 124
• Page End: 130
• Publication Date: 2013-09-01
• Subjects: learning (artificial intelligence) -- particle swarm optimisation -- pattern classification -- pattern clustering -- security of data; incremental particle swarm optimisation -- intrusion detection system -- efficient network management method -- high‐quality network services -- IDS -- network management system -- incremental network traffic classification algorithm -- semi‐supervised particle swarm optimisation -- classification phase -- clustering phase; Computer network architectures -- Periodicals; Computer network protocols -- Periodicals; Information networks -- Periodicals; Telecommunication systems -- Periodicals; 004.605
• DOI: 10.1049/iet-net.2012.0209
• Languages: English
• ISSNs: 2047-4954

Abstract

Abstract : An efficient network management method is essential to high‐quality network services. The intrusion detection system (IDS) is one of the most important components of a network management system to prevent attacks from paralysing the entire network. However, detecting the new type of attacks on a network system is a very difficult problem from the perspective of the classification mechanism of an IDS. This study presents an incremental network traffic classification algorithm called incremental particle swarm optimisation to enhance the performance of IDS. Based on semi‐supervised particle swarm optimisation, the proposed algorithm is composed of two major phases: (i) the classification phase is employed to create the classifier for differentiating the type of network flows from the training dataset and (ii) the clustering phase is then used to classify the newly incoming patterns, which may contain known and unknown network flow types.